Trojan.Starman.6611

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'59.##.149.214':445
'59.#1.8.185':445
'59.##.89.240':445
'59.##.43.153':139
'59.##.91.118':445
'59.##.100.128':445
'59.#1.10.28':445
'59.##.34.242':445
'59.#1.10.22':445
'59.##.17.133':445
'59.##.213.145':445
'59.##.12.174':445
'59.##.242.105':445
'59.##.162.248':139
'59.##.89.240':139
'59.#1.10.28':139
'59.##.213.145':139
'59.##.100.128':139
'59.##.149.214':139
'59.#1.8.185':139
'59.##.12.174':139
'59.##.17.133':139
'59.#1.30.73':139
'59.##.242.169':139
'59.##.242.105':139
'59.##.34.242':139
'59.#1.10.22':139
'59.##.52.104':139
'59.##.113.145':139
'59.##.137.69':139
'59.##.64.190':139
'59.#1.86.84':139
'59.##.91.173':139
'59.##.232.167':139
'59.##.54.186':139
'59.##.130.158':139
'59.##.165.233':139
'59.#1.31.91':139
'59.##.255.30':139
'59.#1.20.34':139
'59.##.150.121':139
'59.##.43.153':445
'59.##.26.138':139
'59.##.93.101':139
'59.#1.30.73':445
'59.##.242.169':445
'59.##.162.248':445
'59.##.235.92':139
'59.#1.15.94':139
'59.##.70.134':139
'59.##.121.112':139
'59.##.41.141':139
'59.##.116.103':139
'59.##.148.225':139
'59.##.91.118':139
'59.##.160.11':139
'59.##.205.159':139
'59.##.92.249':445
'59.##.186.107':139
'59.##.155.186':139
'59.##.11.155':139
'59.##.91.129':445
'59.##.150.90':445
'59.##.142.163':445
'59.##.103.76':445
'59.##.252.110':445
'59.#1.2.244':445
'59.##.182.74':445
'59.##.107.120':139
'59.##.135.240':139
'59.##.238.14':139
'59.##.191.237':139
'59.##.208.66':139
'59.##.21.247':139
'59.##.100.22':139
'59.##.60.191':139
'59.##.106.34':139
'59.##.90.112':139
'59.##.120.90':139
'59.##.113.89':139
'59.##.203.37':139
'59.##.108.181':139
'59.##.108.181':445
'59.##.106.34':445
'59.##.90.112':445
'59.##.60.191':445
'59.##.113.89':445
'59.##.203.37':445
'59.##.120.90':445
'59.##.11.155':445
'59.##.160.11':445
'59.##.205.159':445
'59.##.107.120':445
'59.##.186.107':445
'59.##.155.186':445
'59.##.191.237':445
'59.##.13.146':445
'59.#1.4.38':445
'59.##.30.246':445
'59.##.107.182':445
'59.##.186.254':445
'59.##.255.100':445
'59.##.221.140':445
'59.##.100.22':445
'59.##.135.240':445
'59.##.238.14':445
'59.#1.75.36':445
'59.##.208.66':445
'59.##.21.247':445
'59.##.54.139':139
'59.#1.201.0':445
'59.##.68.201':445
'59.#1.94.68':445
'59.#1.1.85':445
'59.##.112.64':445
'59.##.232.94':445
'59.##.88.183':445
'59.#1.83.26':139
'59.##.241.67':139
'59.##.169.166':139
'59.##.154.214':445
'59.#1.10.25':445
'59.##.25.164':139
'59.##.136.51':445
'59.#1.94.68':139
'59.##.88.183':139
'59.##.154.214':139
'59.##.232.94':139
'59.#1.201.0':139
'59.##.68.201':139
'59.#1.10.25':139
'59.#1.56.30':445
'59.##.224.186':445
'59.##.146.76':445
'59.#1.2.3':445
'59.##.128.67':445
'59.##.216.229':445
'59.##.11.254':139
'59.##.160.61':139
'59.##.223.216':139
'59.##.194.227':139
'59.#1.66.76':139
'59.##.107.26':139
'59.##.125.224':139
'59.##.171.241':139
'59.#1.60.36':139
'59.##.199.208':139
'59.#1.4.222':139
'59.##.28.103':139
'59.##.55.159':139
'59.##.240.253':139
'59.##.169.186':139
'59.##.157.101':139
'59.##.104.35':139
'59.##.213.218':139
'59.##.220.214':139
'59.##.127.176':139
'59.##.42.113':139
'59.##.223.240':139
'59.#1.2.243':139
'59.##.144.18':139
'59.##.91.217':139
'59.##.181.41':139
'59.##.165.150':139
'59.##.112.64':139
'59.#1.15.94':445
'59.##.70.134':445
'59.##.121.112':445
'59.##.41.141':445
'59.##.116.103':445
'59.##.148.225':445
'59.##.150.121':445
'59.##.52.104':445
'59.##.113.145':445
'59.##.137.69':445
'59.##.64.190':445
'59.#1.86.84':445
'59.##.91.173':445
'59.##.235.92':445
'59.##.163.52':139
'59.#1.8.163':139
'59.##.31.200':139
'59.##.80.144':139
'59.#1.59.40':139
'59.##.23.206':139
'59.#1.75.45':139
'59.##.79.104':139
'59.##.26.138':445
'59.##.93.101':445
'59.#1.77.75':139
'59.#1.9.49':139
'59.##.113.91':139
'59.##.113.91':445
'59.##.79.104':445
'59.#1.2.3':139
'59.#1.75.45':445
'59.#1.77.75':445
'59.#1.9.49':445
'59.##.128.67':139
'59.##.146.76':139
'59.##.136.51':139
'59.#1.1.85':139
'59.##.216.229':139
'59.#1.56.30':139
'59.##.224.186':139
'59.##.31.200':445
'59.#1.20.34':445
'59.##.54.186':445
'59.##.130.158':445
'59.##.232.167':445
'59.#1.31.91':445
'59.##.255.30':445
'59.##.165.233':445
'59.##.23.206':445
'59.##.163.52':445
'59.#1.8.163':445
'59.##.54.139':445
'59.##.80.144':445
'59.#1.59.40':445
'59.##.182.84':445
'59.##.154.181':445
'59.##.52.171':445
'59.##.163.138':445
'59.##.236.71':445
'59.#1.85.43':445
'59.##.160.181':445
'59.##.99.121':445
'59.#1.12.11':445
'59.##.214.175':445
'59.##.104.161':445
'59.##.136.89':445
'59.##.108.124':445
'59.##.58.136':445
'59.#1.40.66':445
'59.##.148.193':445
'59.#1.77.38':445
'59.#1.58.7':445
'59.##.45.216':445
'59.##.232.13':445
'59.##.169.204':445
'59.##.136.77':445
'59.##.245.206':445
'59.#1.28.19':445
'59.#1.14.89':445
'59.##.27.158':445
'59.#1.63.22':445
'59.#1.160.0':445
'59.##.110.212':445
'59.##.18.170':445
'59.##.222.252':445
'59.##.14.223':445
'59.##.230.50':445
'59.#1.63.22':9988
'59.#1.28.19':9988
'59.##.163.138':9988
'59.##.160.181':9988
'59.#1.66.36':9988
'59.##.136.77':9988
'59.##.245.206':9988
'59.##.252.170':445
'59.#1.27.93':445
'59.##.221.26':445
'59.##.201.177':445
'59.##.36.180':445
'59.##.38.152':445
'59.#1.28.11':445
'59.##.190.184':445
'59.#1.14.35':445
'59.##.60.230':445
'59.##.171.60':445
'59.#1.10.40':445
'59.##.198.65':445
'59.#1.70.26':445
'59.#1.66.36':445
'59.##.58.136':139
'59.##.236.71':139
'59.##.163.138':139
'59.##.136.77':139
'59.##.245.206':139
'59.#1.28.19':139
'59.#1.85.43':139
'59.##.160.181':139
'59.##.104.161':139
'59.##.136.89':139
'59.##.182.84':139
'59.##.154.181':139
'59.##.52.171':139
'59.#1.63.22':139
'59.##.232.218':139
'59.##.232.13':139
'59.##.40.107':139
'59.#1.66.36':139
'59.##.13.230':139
'59.##.45.216':139
'59.#1.58.7':139
'59.##.169.204':139
'59.#1.14.89':139
'59.##.27.158':139
'59.#1.40.66':139
'59.##.148.193':139
'59.#1.77.38':139
'59.##.252.170':139
'59.##.222.252':139
'59.##.14.223':139
'59.#1.14.35':139
'59.##.60.230':139
'59.##.171.60':139
'59.##.230.50':139
'59.##.232.218':445
'59.##.13.230':445
'59.##.40.107':445
'59.#1.160.0':139
'59.##.110.212':139
'59.##.18.170':139
'59.#1.70.26':139
'59.##.214.175':139
'59.##.36.180':139
'59.##.38.152':139
'59.##.108.124':139
'59.##.99.121':139
'59.#1.12.11':139
'59.#1.28.11':139
'59.##.190.184':139
'59.#1.10.40':139
'59.##.198.65':139
'59.#1.27.93':139
'59.##.221.26':139
'59.##.201.177':139
'59.##.136.89':9988
'59.##.233.27':139
'59.##.207.232':139
'59.##.189.207':139
'59.##.19.155':139
'59.##.225.217':139
'59.##.27.226':139
'59.##.207.157':139
'59.##.253.162':445
'59.#1.49.56':445
'59.#1.143.5':445
'59.#1.55.38':139
'59.##.197.246':445
'59.##.162.197':445
'59.##.91.228':139
'59.##.56.214':445
'59.##.77.199':445
'59.##.100.243':445
'59.##.61.250':445
'59.#1.29.19':445
'59.##.240.104':445
'59.##.197.246':139
'59.#1.143.5':139
'59.##.221.143':139
'59.##.97.221':139
'59.##.162.197':139
'59.##.253.162':139
'59.#1.49.56':139
'59.##.142.163':139
'59.##.103.76':139
'59.##.107.182':139
'59.#1.2.244':139
'59.##.182.74':139
'59.##.150.90':139
'59.##.186.254':139
'59.##.30.246':139
'59.##.221.140':139
'59.#1.75.36':139
'59.##.255.100':139
'59.##.13.146':139
'59.#1.4.38':139
'59.##.252.110':139
'59.##.19.155':445
'59.##.225.217':445
'59.##.27.226':445
'59.##.221.143':445
'59.##.97.221':445
'59.##.91.228':445
'59.##.233.27':445
'59.#1.55.38':445
'59.##.92.249':139
'59.##.91.129':139
'59.##.207.232':445
'59.##.189.207':445
'59.##.207.157':445
'59.##.102.183':445
'59.##.72.169':139
'59.##.195.72':139
'59.##.82.104':139
'59.#1.83.86':139
'59.##.251.14':139
'59.##.169.78':139
'59.##.180.88':139
'59.#1.9.90':139
'59.##.102.183':139
'59.##.61.250':139
'59.##.127.180':139
'59.##.16.189':139
'59.##.69.202':139
'59.##.238.206':139
'59.##.168.18':139
'59.#1.33.96':139
'59.##.249.12':139
'59.##.221.26':9988
'59.#1.70.26':9988
'59.##.230.50':9988
'59.##.104.198':139
'59.##.107.191':139
'59.##.147.122':139
'59.##.168.172':139
'59.##.251.68':139
'59.#1.0.67':139
'59.##.35.106':139
'59.##.251.14':445
'59.##.169.78':445
'59.##.72.169':445
'59.##.168.172':445
'59.##.238.206':445
'59.#1.83.86':445
'59.##.195.72':445
'59.##.16.189':445
'59.##.69.202':445
'59.#1.9.90':445
'59.##.82.104':445
'59.##.180.88':445
'59.##.127.180':445
'59.##.147.122':445
'59.##.77.199':139
'59.##.100.243':139
'59.##.168.18':445
'59.#1.29.19':139
'59.##.240.104':139
'59.##.56.214':139
'59.#1.33.96':445
'59.#1.0.67':445
'59.##.35.106':445
'59.##.107.191':445
'59.##.249.12':445
'59.##.104.198':445
'59.##.251.68':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней